Codefuture

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Codefuture records in CISA KEV

No Codefuture vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cf Image Hosting Script 1 record LOW Image Hosting Script 1 record MEDIUM

Records

2 records

TI-2019-15761 CVE-2019-25709 · GHSA-g3cq-f9xx-gc5g

CF Image Hosting Script 1.6.5 Unauthorized Database Access

MEDIUM 49

CF Image Hosting Script 1.6.5 allows unauthenticated attackers to download and decode the application database by accessing the imgdb.db file in the upload/data directory.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00607 Published 2026-04-12 No fix listed CWE-552

TI-2011-03938 CVE-2011-4572 · GHSA-qvff-2f5c-wmh7

Cross-site scripting (XSS) vulnerability in inc/tesmodrewite.php in CF Image Hosting…

LOW 23

Cross-site scripting (XSS) vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01526 Published 2011-11-29 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0